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INTERNATIONAL PRELIMINARY 
EXAMINATION REPORT 



International application No. PCT/GB 03A)4377 



I. Basis of the report 

1 . With regard to the elements of the international application (Replacement sheets which have been furnished to 
the receiving Office tn response to an invitation under Article 14 are referred to in this report as "originally filed'' 
and are not annexed to this report since they do not contain amendments (Rules 70. 16 and 70 17)y 



Descriptioni Pages 

1-6, 8-45 
7 



as originally filed 

received on 23.09.2004 with letter of 20.09.2004 



Claims, Numbers 

1-42 



received on 23.09.2004 with letter of 20.09.2004 



Drawings, Sheets 

1/13-13/13 



as originally filed 



2. With regard to the language, all the elements marked above were available or furnished to this Authority in the 
language in which the international application was filed, unless otherwise indicated under this item. 

These elements were available or furnished to this Authority in the following language: , which is: 

□ the language of a translation furnished for the purposes of the international search (under Rule 23.1 (b)). 

□ the language of publication of the international application (under Rule 48.3(b)). 
□ 



3. 



the language of a translation furnished for the purposes of International preliminary examination (under 
Rule 55.2 and/or 55.3). ^ 

With regard to any nucleotide and/or amino acid sequence disclosed in the international application, the 
international preliminary examination was carried out on the basis of the sequence listing: 

□ 
□ 



□ 
□ 
□ 



contained in the International application In written form, 
filed together with the International application in computer readable form, 
furnished subsequently to this Authority in written form, 
furnished subsequently to this Authority In computer readable fonn. 

The statement that the subsequently furnished written sequence listing does not go beyond the disclosure 
in the international application as filed has been furnished. 

The statement that the information recorded in computer readable form is identical to the written sequence 
listing has been furnished. 



4. The amendments have resulted In the cancellation of: 

□ the description, 

□ the claims, 

□ the drawings, 
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5. □ This report has been established as if (some of) the amendments had not been made, since they have 

been considered to go beyond the disclosure as filed (Rule 70.2(c)). 

(Any replacement sheet containing such amendments must be refen-ed to under item 1 and annexed to this 
report.) 

6. Additional observations, if necessary: 

V. Reasoned statement under Article 35(2) with regard to novelty, inventive step or industrial applicability; 
citations and explanations supporting such statement 

1. Statement 

Novelty (N) Yes: Claims 3,4,9-15,20,37 

No: Claims 1 ,2,5-8,1 6-1 9,21 -36,38-42 

Inventive step (IS) Yes: Claims 3,4,9-15,20,37 

No: Claims 1 ,2,5-8,16-1 9,21-36,38-42 

Industrial applicability (lA) Yes: Claims 1-42 • 

No: Claims 



2. Citations and explanations 
see separate sheet 
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Re Item V 

Reasoned statement with regard to novelty, inventive step or industrial 
applicability; citations and explanations supporting sucli statement 

1 Reference is made to the following document: 

D1 : US 2002/069364 A1 (DOSCH FRANZ A) 6 June 2002 

2 Claims 1 and 8 are not clear and concise in tlie sense of article 6 PCT. 

2.1 Claims 1 and 8 have been drafted as two separate independent claims in the 

same category, they appear to relate effectively to the same subject-matter and to 
differ from each other only with regard to the definition of the subject-matter for 
which protection is sought and in respect of the terminology used for the features . 
of that subject-matter. The aforementioned claims therefore lack conciseness and 
as such do not meet the requirements of Article 6 PCT. 

3 The subject-matter of claims 1 and 8, the above clarity objections notwithstanding, 
is not new in the sense of Article 33(2) PCT. 

3.1 The document D1 discloses (the references in parentheses applying to this 
document) in terms of claim 1 : 

A device for connection to a data processing apparatus, the device including first 
coupling means for operative coupling to authentication storage means storing 
predetemiined information relating to the authentication of a transaction with the 
data processing apparatus (paragraph [0024]); second coupling means for 
operative coupling to the data processing apparatus (paragraph [0025]), the 
device when operatively coupled to the data processing apparatus being 
responsive to an authentication process carried out via a communications link for 
authenticating the transaction, the authentication process involving the use of the 
predetemnined infonnation (paragraph [0027]); characterized by security data 
entry means for obtaining security data independently of the data processing 
apparatus (paragraph [0023]); and means for storing the security data temporarily 
(paragraphs [0026]). 

Since all the features of claim 1 are known in combination from document D1 , the 
subject-matter of claim 1 is not new (Article 33(2) PCT). 
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3.2 The document D1 discloses (the references in parentheses applying to this 
document) in terms of claim 8: 

A device for connection to a data processing apparatus, the device including first 
coupling means for operative coupling to authentication storage means storing 
predetermined information relating to the authentication of a transaction with the 
data processing apparatus (paragraph [0024]); second coupling means for 
operative coupling to the data processing apparatus (paragraph [0025]); the 
device when operatively coupled to the data processing apparatus being 
responsive to an authentication process carried out via a communications link for 
authenticating the transaction, the authentication process involving the use of the 
predetemilned configuration infomriation (paragraph [0027]) and characterized by 
configuration means for selectively rendering the second coupling means 
available for coupling to the data processing apparatus (paragraph [0025]). 

Since all the features of claim 8 are known in combination from document D1 , the 
subject-matter of claim 8 is not new (Article 33(2) PCT). 

4 Dependent claims 2.5-7. 1 6-1 9,21 -36,38-42 do not contain any features which, in 
combination with the features of any claim to which they refer, meet the require- 
ments of the PCT in respect of novelty, see document D1 and the corresponding 
passages cited in the search report. 

4.1 The combination of the features of dependent claims 3,4,9-15,20 and 37 is nei- 
ther known from, nor rendered obvious by, the available prior art. 

Re Item Vli 

Certain defects in the international application 

Contrary to the requirements of Rule 5.1(a)(li) PCT, the relevant background art 
disclosed in D1 Is not mentioned in the description, nor is D1 mentioned in the 
description. 

In Independent claim 8 the reference signs for the device (46;276;296) do not 
correspond to device but to security data entry means. Furthemnore. the configuration 
means (6) do not have a corresponding drawing (6). 
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Pfflfnientication process can be carried out. In a case where the SIM is the SIM of a 
subscriber to a particular cellular teleconununications network, the authentication process 
can be carried out by that network. 

It should be noted that the authentication process being described does not necessarily 
authenticate the human identity of the user. For example, cellular telecommunication 
networks have pre-pay subscribers who are issued with SIMs in return for pre-payment 
enabling them to make calls on the network. However, the identity of such pre-pay 
subscribers is not known (or not necessarily known) by the networks. Nevertheless, such 
a user cannot make use of the network until the network has authenticated that user's SIM 
- that is, has confirmed that such user is a particular user who has a particular pre-paid 
account with the network. The SIMs of such pre-paid users or subscribers could equally 
well be used (in the manner described) in or in association with data processing apparatus 
or computers, for the purposes of authenticating that user. 

The SIM need not take the form of a physical (and removable) smart card but instead can 
be simulated by being embedded in the data processing apparatus or computer in the form 
of software or represented as a chip for example. 

It may be desirable to be able to change the authentication information on the SIM (or 
simulated SIM) to take account of changed circumstances. For example, the SIM maybe 
a SIM registered with a particular cellular telecommunications networic - a network 
applicable to the country or region where the data processing apparatus or computer is to 
be used. However, circumstances may arise (for example, the apparatus or the computer 
is physically moved to a different country or region) in which it is desirable or necessary 
to re-register the SIM with a different cellular telecommunications network. Ways in 
which this can be done are disclosed in our co-pending United Kingdom patent 
applications Nos. 01 18406.8, 01227123 and 0130790.9 and in our corresponding PCT 
applications Nos. GB02/003265, GB02/003260 and GB02/003252. As described therein 
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CLAIMS 



1 . A device for connection to a data processing apparatus^ the device including first 
coupling means for operative coupling to authentication storage means storing 
predetermined infomiation relating to the authentication of a transaction with the data 
processing apparatus; second coupling means for operative coupling to fhe data 
processing apparatus, the device when operatively coupled to the data processing 
apparatus being responsive to an authentication process carried out via a communications 
link for authenticating the transaction^ the authentication process involving the use of the 
predetermined information; security data entiy means for obtaining security data 
independently of the data processing apparatus; and means for storing die security data 
temporarily. 

2. The device of claim 1 , wherein the security data is stored temporarily by means of 
a transient power source. 

3 . The device of claim 2, wherein the transient power source comprises piezo electric 
means. 

4. The device of claim 3, wherein the piezo electric means comprises one or more 
piezo electric cells. 

5. The device of claim 23 or 4, wherein the transient power source is charged by the 
security data entry means. 



6. The device of claim 2,3,4 or 5, wherein the transient power source comprises a 
rechargeable battery. 
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7» The device of any one of claims 1 to 6, comprising means for analysing the entered 
security data for determining whether to allow access to the predeteraiined infomiation. 

8. A device for connection to a data processing apparatus, the device including first 
coupling means for operative coupling to authentication storage means storing 
predetermined information relating to the authentication of a transaction with the data 
processing apparatus; second coupling means for operative coupling to the data 
processing apparatus; and configuration means for selectively rendering the second 
coupling means available for coupling to the data processing apparatus, the device when 
operatively coupled to the data processing apparatus being responsive to an authCTticaticm 
process carried out via a communications link for authenticating the transaction, the 
authentication process involving the use of the predetermined configuration information. 

9. The device of claim 8, wherein the configuration means comprises means for 
selectively making the second coupling means available externally of the device housing. 

10. The device of claim 9, wherein the configuration means comprises a removable 
cap. 

1 1. The device of claim 9, wherein the configuration means comprises a closure 
member coupled to and moveable with respect to the housing for selectively closing an 
aperture in die housing. 

12. The device of claim 1 1, comprising interconnection means for connecting the 
closure member and the second coupling means, the arrangement being such that, as the 
closure member is moved to open the aperture, the second coupling means emerges firom 
the aperture. 



13. The device of claim 8, comprising a knob mounted on the device housing for 
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rotation with respect thereto^ and means for converting rotation of said knob into linear 
movement of the second coupling means such that rotation of said knob in a first direction 
causes the second coupling means to emerge fi*om an aperture in the device housing and 
rotation of said knob in a second direction causes the second coupling means to be 
retracted through said aperture. 

14. Hie device of claim 9> wherein the device housing includes two parts moveable 
with respect to one another between a first arrangement where the second coupling means 
is contained within the housing and a second arrangement where the second coupling 
means is exposed for connection to the data processing apparatus. 

15. The device of claim 14, wherein the two parts are pivotally coupled together. 

16. The device of any one of claims 8 to 1 5, comprising security data entry means for 
obtaining security data indq)endently of the data processing apparatus, and means for 
analysing the entered security data for determining whether to allow access to the 
predetermined information. 

1 7. The device of any one of claims 8 to 1 5, comprising security data entry means for 
obtaining security data independently of the data processing apparatus; and means for 
storing the security data temporarily. 

1 8. The device of any one of claims 1 to 17, wherein the device controls access to the 
predetermined information. 

19. The device of any one of claims 1 to 7 and 16 to 18, wherein the security data 
entry means comprises alphanumeric data entry means. 



20. The device of any one of claims 1 to 7 and 16 to 19, wherein the security data 
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entiy means comprises a keypad. 

21. The device of any one of claims 1 to 7 and 16 to 20, wherein the security data 
comprise a Personal Identification Number (PIN) and analysing means compares tiie PIN 
obtained by the security data means with a PIN stored on the authentication storage 
means and only allows access to the predetermined information when the respective PINs 
match. 

22. The device of any one of the preceding claims, comprising a display for displaying 
security information. 

23. The device of any one of the preceding claims, comprising a data processing 
module for controlling the communication with the data processing apparatus. 

24. The device of claim 23, wherein the data processing module of the device is 
configured for communicating with a corresponding data processing module of the data 
processing- apparatus. 

25. The device of claim 24, wherein communication between the authentication 
storage means and the data processing apparatus is performed via the respective data 
processing modules. 

26. The device of claim 23,24 or 25, wherein the data processing module of the device 
includes means for decrypting encrypted data received fi'om the data processing module 
of the data processing apparatus. 



27. The device of claim 23,24,25 or 26, wherein the data processing module of the 
device includes means for encrypting data transmitted to the data processing module of 
the data processing apparatus. 
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28. The device of claims 26 or 27, wherein the respective data processing modules 
comprise a key for allowing encryption and/or deciyption of data. 

29. The device of claim 28, wherein die key comprises a shared secret key for each of 
die respective data processing modules. 

30. The device of any one of the preceding claims, wherein the device is operatively 
coupleable to one of more of a plurality of said authentication storage means, each of 
which is registerable with a common telecommunication system, and wherein the 
authentication process is p^ormed by a communications link with the 
telecommunications system. 

3 1 . The device of claim 30, in which the predetermined audientication information 
stored by each authentication storage means corresponds to information \^ich is used to 
authenticate a user of that authentication storage means in relation to the 
telecommunications system. 

32. The device of claim 31, in which each user is authenticated in the 
telecommunications system by means of the use of a smart card or subscriber identity 
module (e.g. SIM), and in which the authentication storage means respective to that user 
corresponds to or simulates the smart card for that user. 

33. The device of any one of claims 1 to 32, in which the transaction is a transaction 
involving use of the data processing functions of the data processing apparatus. 

34. The device of any one of claims 1 to 33, in which the authentication storage means 
is specific to that device. 
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35. The device of any one of claims 1 to 34, in which the authentication process 
involves the sending of a message and the generation of a response dependent on the 
message and the predetermined information. 

36. The device of any one of claims 30 to 35, wherein the telecommunications system 
includes means for levying a charge for the transaction when authorised. 

37. The device for any one of claims 1 to 7, 1 6 and 1 7» wherein the security data entxy 
means comprises a rotary knob. 

38. The device of any one of the preceding claims in combination with the data 
processing apparatus. 

39. The device of any one of the preceding claims in combination with the 
telecommunications system. 

40. The device of any one the preceding claims, wherein the authentication storage 
means communicates wirelessly to authenticate the transaction. 

41 . The device of any one the preceding claims, wherein the authentication storage 
means comprises a smart card or SIM which authenticates the transaction when the smart card 
or SIM is operable in a mobile terminal. 



42. The device of any one the preceding claims, wherein the authentication storage 
means conq>rises a smart card or SIM which is further operable to authenticate a mobile 
terminal for use in the system. 



